隐私政策
最近更新：2026 年 11 月 4 日
我们是谁
Melora 是一款本地优先的音乐播放器（"我的音乐我做主"）。本政策说明我们在提供 App 与云同步服务时收集哪些数据、为什么收集、以及你如何控制它们。
我们恪守的原则
- 不托管音频。你的音乐文件永远留在你的设备或你自己的 NAS / 服务器上，我们不会上传、存储或转码你的音频。
- 指纹不可逆。社区与同步功能使用的音频指纹（Chromaprint）无法还原出音频内容。
- 按需索取。不开启云同步，就不会有任何曲库数据离开你的设备。
我们收集的数据
- 本地曲库：仅在你的设备上扫描与展示，默认不上传。
- 账号信息（可选）：可使用 Google 登录，涉及第三方提供的邮箱地址、显示名与头像。Melora 自行签发可吊销的登录会话，不设密码注册。游客模式可不登录使用本地功能。
- 云同步数据（订阅功能，可选）：你主动同步的红心收藏、歌单、播放记录、元数据修改、自定义封面与歌词覆盖，存储于我们的服务器，仅用于在你的设备间同步。
- 使用统计（可关闭）：匿名化的功能使用与崩溃数据（Firebase / GA4），用于改进产品。可随时在「设置 → 反馈与支持 → 隐私」中关闭。
- 订阅状态：购买由 Google Play / App Store 处理与记录。我们只会收到购买凭证与订阅状态（有效、宽限期、冻结、到期等），绝不接触你的支付卡信息。
AI 功能
AI 助手使用你自己填写的 API 密钥，请求从设备直连你所配置的服务商，Melora 服务器不经手、不记录这些请求内容。
数据共享
不出售、不出租你的数据。仅以下服务商按各自隐私政策处理必要数据：Google（登录）、Google Play / Apple（支付与订阅）、Firebase / Google Analytics（可关闭的匿名统计）。
数据保留与删除
取消自动续费不等于实际到期，已付周期仍可正常使用。官方云同步数据自订阅实际到期起保留 90 天，期间暂停同步；在保留期内续订会自动恢复并补齐同步，严格超过 90 天后清理。自建同步不按此政策自动清理。你可以随时通过邮件联系我们删除账号及其全部云端数据。
儿童隐私
Melora 不面向 13 岁以下儿童，也不主动收集儿童数据。
政策变更
本政策如有更新会发布在本页面；重大变更将在 App 内提示。
联系我们
隐私相关问题与删除请求：melora_feedback@meloramusic.net
Privacy Policy
Last updated: November 4, 2026
Who we are
Melora is a local-first music player ("Your music, your rules"). This policy explains what data we collect when you use the app and the optional cloud-sync service, why, and how you stay in control.
Our principles
- No audio hosting. Your music files never leave your device or your own NAS/server. We never upload, store, or transcode your audio.
- Irreversible fingerprints. The Chromaprint audio fingerprints used by community and sync features cannot be reversed into audio.
- Opt-in by design. Without cloud sync enabled, no library data leaves your device.
Data we collect
- Local library: scanned and displayed on your device only; never uploaded by default.
- Account (optional): sign in with Google, involving the email address, display name, and avatar supplied by that provider. Melora issues its own revocable sessions and has no password registration. Guest mode works without an account for local features.
- Cloud-sync data (optional, subscription): the favorites, playlists, play history, metadata edits, custom covers, and lyric overrides you choose to sync, stored on our servers solely to sync between your devices.
- Usage analytics (opt-out): anonymized feature-usage and crash data (Firebase / GA4) to improve the product. Disable anytime in Settings → Feedback & Support → Privacy.
- Subscription status: purchases are processed and recorded by Google Play / the App Store. We only receive the purchase token and subscription state (active, grace period, on hold, expired, …) — never your payment card details.
AI features
The AI assistant uses your own API key and connects your device directly to the provider you configured. Melora's servers never relay or log those requests.
Sharing
We never sell or rent your data. Only these processors handle what is necessary, under their own privacy policies: Google (authentication), Google Play / Apple (payments and subscriptions), Firebase / Google Analytics (optional anonymized analytics).
Retention and deletion
Canceling auto-renewal does not end an already paid period. Official cloud-sync data is retained for 90 days after actual subscription expiry, with sync paused during retention. Renewing within that period automatically resumes and catches up sync; cleanup occurs only after more than 90 days. Self-hosted sync is not automatically cleaned up under this policy. Email us anytime to delete your account and all cloud data.
Children
Melora is not directed at children under 13 and does not knowingly collect their data.
Changes
Updates are published on this page; material changes are announced in the app.
Contact
Privacy questions and deletion requests: melora_feedback@meloramusic.net